$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: 4IPIoOjFLL61bEHr1wrGjPoJYVHAmDhAP/ilVFyPF08= Subject key identifier: 77:F2:73:0D:4C:DC:22:F7:89:84:B9:11:DC:32:8C:5D:63:D3:13:4B Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 36F8AA90D9EAA3BE337692DE16FD688844AD3826 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 0338 Signing time: Sun 29 Jun 2025 16:08:46 +0000 Manifest this update: Sun 29 Jun 2025 16:03:46 +0000 Manifest next update: Mon 30 Jun 2025 16:22:46 +0000 Files and hashes: 1: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: nWIEn7E9FCWMc4N3y0dGccOPULSVb8fK55CEIGqJixw=) 2: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: 8SLvsZe3VOP8V72yk+PKT72w8iUqmJpSKu2elDQ+WOg=) 4: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 15:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f8:aa:90:d9:ea:a3:be:33:76:92:de:16:fd:68:88:44:ad:38:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Jun 29 16:03:46 2025 GMT Not After : Jun 30 16:22:46 2025 GMT Subject: CN=77F2730D4CDC22F78984B911DC328C5D63D3134B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:f3:bb:4a:63:b1:83:ad:af:a5:c4:b8:c7: a7:71:e5:8a:87:10:eb:3c:48:8b:89:7f:8a:c0:2f: 87:a4:9f:08:22:04:40:2e:cb:48:7f:cd:1a:db:5f: 27:de:cb:12:a8:7e:2f:00:26:a1:9e:d3:da:a9:21: 93:37:8d:24:d4:a0:69:a5:a7:b6:04:57:7b:87:47: fd:17:56:ae:25:46:12:3e:a2:e1:d6:99:e2:b3:51: 89:eb:40:5d:45:3d:71:45:54:9a:e7:f5:3b:6b:f6: 24:9a:34:52:a8:a6:fc:b2:a8:b2:c1:60:fa:92:ae: 0a:e8:e2:3b:d0:d1:ed:5e:8b:5f:03:45:d4:79:87: 4c:9f:99:25:aa:9c:aa:54:54:1b:ab:6b:50:12:d0: ff:dc:7b:3d:25:49:9a:11:d6:06:a7:94:41:37:35: 47:ee:ed:0d:e5:0d:99:51:18:49:f9:3c:23:7c:4e: 7b:7c:78:a1:ce:dd:05:81:03:a8:19:87:f7:5e:dd: 87:c6:e6:a7:8f:11:03:75:91:bc:65:79:0a:de:ee: 8e:9d:a5:19:6e:c5:67:64:d7:e2:77:91:f1:57:55: 0c:ba:43:0b:f4:4b:dc:eb:90:cd:c6:82:39:62:e4: 37:f8:52:eb:59:d0:10:29:57:b4:2d:8f:49:2e:6e: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F2:73:0D:4C:DC:22:F7:89:84:B9:11:DC:32:8C:5D:63:D3:13:4B X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:83:2e:dc:ad:bb:85:91:7f:01:07:f1:7b:97:ec:56:fe: b7:10:29:71:88:29:c9:bb:50:0b:40:2f:cb:f9:9b:c3:c2:ee: 1d:9f:64:33:be:a7:9f:34:31:32:f0:ea:41:95:ea:05:a1:94: 69:90:b4:82:18:9c:be:8a:25:d1:fa:84:09:5b:1d:64:3c:44: e1:2f:0b:f9:d7:38:76:42:a0:f3:77:9a:77:f6:c3:f9:e1:d0: c9:61:39:45:86:f9:04:dc:94:bd:39:7e:60:2d:75:a2:d5:dc: 48:81:2b:d8:fb:15:be:10:db:88:11:b3:99:f6:29:6a:b8:4e: b6:3c:3f:e3:a4:8f:a1:04:c4:f2:df:17:01:4d:a2:a6:03:d8: 83:89:c6:0a:7e:d8:45:86:bd:1a:40:58:19:76:39:04:c4:a2: e0:30:a1:29:46:4b:72:a2:93:7c:4d:96:6b:f2:33:1f:68:85: 42:12:3c:a4:8d:d4:c0:b3:28:2c:14:8c:36:2d:fa:dd:79:c4: 45:bb:b9:13:91:eb:6b:c5:56:f5:11:0a:96:bf:b0:8a:72:67: bc:df:ba:b7:45:79:36:97:56:cb:74:33:4c:ae:ec:f3:1c:1c: 71:bd:84:1c:b5:a9:88:c3:82:fa:f5:0c:8a:4a:4a:19:e7:28: 74:c7:8b:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNviqkNnqo74zdpLeFv1oiEStOCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNTA2MjkxNjAzNDZaFw0yNTA2MzAxNjIyNDZaMDMxMTAvBgNV BAMTKDc3RjI3MzBENENEQzIyRjc4OTg0QjkxMURDMzI4QzVENjNEMzEzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyfO7SmOxg62vpcS4x6dx5YqH EOs8SIuJf4rAL4eknwgiBEAuy0h/zRrbXyfeyxKofi8AJqGe09qpIZM3jSTUoGml p7YEV3uHR/0XVq4lRhI+ouHWmeKzUYnrQF1FPXFFVJrn9Ttr9iSaNFKopvyyqLLB YPqSrgro4jvQ0e1ei18DRdR5h0yfmSWqnKpUVBura1AS0P/cez0lSZoR1ganlEE3 NUfu7Q3lDZlRGEn5PCN8Tnt8eKHO3QWBA6gZh/de3YfG5qePEQN1kbxleQre7o6d pRluxWdk1+J3kfFXVQy6Qwv0S9zrkM3Ggjli5Df4UutZ0BApV7Qtj0kubgZzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUd/JzDUzcIveJhLkR3DKMXWPTE0swHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMzYMu 3K27hZF/AQfxe5fsVv63EClxiCnJu1ALQC/L+ZvDwu4dn2QzvqefNDEy8OpBleoF oZRpkLSCGJy+iiXR+oQJWx1kPEThLwv51zh2QqDzd5p39sP54dDJYTlFhvkE3JS9 OX5gLXWi1dxIgSvY+xW+ENuIEbOZ9ilquE62PD/jpI+hBMTy3xcBTaKmA9iDicYK fthFhr0aQFgZdjkExKLgMKEpRktyopN8TZZr8jMfaIVCEjykjdTAsygsFIw2Lfrd ecRFu7kTketrxVb1EQqWv7CKcme837q3RXk2l1bLdDNMruzzHBxxvYQctamIw4L6 9QyKSkoZ5yh0x4so -----END CERTIFICATE-----Generated at Mon Jun 30 03:42:09 2025 by rpki-client